From owner-freebsd-stable Tue Sep 21 16:35:28 1999 Delivered-To: freebsd-stable@freebsd.org Received: from mailbox3.ucsd.edu (mailbox3.ucsd.edu [132.239.1.55]) by hub.freebsd.org (Postfix) with ESMTP id 93365150CE for ; Tue, 21 Sep 1999 16:35:26 -0700 (PDT) (envelope-from btalbot@ucsd.edu) Received: from earthkam.ucsd.edu (thneed.earthkam.ucsd.edu [132.239.242.10]) by mailbox3.ucsd.edu (8.9.3/8.9.3) with ESMTP id QAA22350 for ; Tue, 21 Sep 1999 16:35:25 -0700 (PDT) Received: from celis by earthkam.ucsd.edu (8.8.8+Sun/SMI-SVR4) id QAA11449; Tue, 21 Sep 1999 16:35:23 -0700 (PDT) Message-Id: <4.2.0.58.19990921163209.00a49f00@ekimaphost> X-Sender: btalbot@ekimaphost X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.0.58 Date: Tue, 21 Sep 1999 16:35:22 -0700 To: stable@FreeBSD.ORG From: Bryan Talbot Subject: Re: kern.maxfiles and kern.maxfilesperproc In-Reply-To: References: <19990921161540.D49731@forty-two.egroups.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG At 04:23 PM 9/21/99 , Kip Macy wrote: >Thanks. Although having maxfiles == maxfilesperproc might make sense for >special cases e.g. a machine completely dedicated to one process -- It is >dangerous at best for the general case. Any malicious program can make a >machine running FreeBSD non-functional. The default should be set with the >average user in mind, namely protecting him from himself. > > > -Kip But adjusting maxfilesperproc > maxfiles won't protect you from a malicious process or user any more than having maxfilesperproc == maxfiles. Just fork() or run two (or more) processes that open all the file handles. Same result, right? -Bryan ===================================================================== IMPORTANT NOTICE: According to certain suggested versions of the Grand Unified Theory, the primary particles constituting this message may decay to nothingness within the next Four Hundred Million Years. ===================================================================== "I think not!" said Descartes, who promptly disappeared. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message